Learn CAIN OpenShell: from zero to expert, then sell it

No AI background needed. Five levels, each with something to actually do, at your own pace. Tick items as you go (your ticks stay in this browser).

Evidence, proof and selling tools for CAIN OpenShell

Level 1 Beginner: understand it

CAIN OpenShell checks each file, network or process action an AI agent wants to take against that agent's sandbox policy, and refuses anything outside it, such as reading /etc/shadow or an SSH key.

Think of it like this: A building pass that opens your office but not the server room, whoever you say you are.

Read the full plain-English explanation: CAIN OpenShell, explained.

• I read the explanation above.
• I can say what it does in one sentence, without notes.

Level 2 User: see it work

Run it live: open the live demo. Before each result, guess what will happen. These are checks it must pass:

• Open a work file in /tmp: Inside the policy.
• Open /etc/shadow (system passwords): A protected system file.
• Open /root/.ssh/id_rsa (a private key): Private keys are off limits.

• I ran the live demo.
• I can explain what one of these checks shows.

Level 3 Verifier: prove it yourself

This is the skill that sets you apart: you don't have to believe us, and neither do your customers.

1. Install Python 3 if you don't have it (python.org/downloads).
2. Download the kit and unzip it.
3. Open a terminal in that folder. On Windows, click the folder's address bar, type cmd and press Enter. On a Mac, right-click the folder and choose New Terminal at Folder.
4. Run python3 verify.py (on Windows, python verify.py). It checks the seal without the internet.
5. Run python3 verify.py --live. It repeats every check from your own computer.
6. Try to cheat it: open transcript.json in a text editor, change one character, save, and run python3 verify.py again. It must now say FAIL. Unzip a fresh copy afterward.

• I ran the kit's check on my own computer.
• I changed a file and saw it fail.

Level 4 Expert: know the edges

An expert knows what a product does not do, and says it first. That is what makes a buyer trust you.

• It decides on actions it is asked about; an agent that bypasses it is not covered.
• The homepage card mentions a Kubernetes operator and eBPF kprobes; the live check here is a policy decision plus a POSIX sandbox for commands it runs itself. Sell what the demo shows.
• Network actions need an exact target format; a malformed one is refused (fail-closed), not explained.

You can say

• Every agent action is checked against its policy first.

Never say

• "Unbreakable" or "stops every attack".

Read the questions real buyers send, with honest answers: answers to buyer questions.

Test yourself (click a question to see the answer)

• I got every quiz question right without looking.
• I can name one thing it does not do.
• I explained it to a friend, and they understood it.

Want a formal study path? The CAIN Academy has courses and exams. Finishing this page is your own practice; it is not a qualification or certification.

Level 5 Seller: put it in front of a customer

1. Copy, paste, send: the shortest route, no technical skill needed.
2. Who buys it and where to find them.
3. The sales conversation, then the offer and the close.
4. The rules: read these before your first message.
5. Selling tools with this product's evidence built in: pitch, emails, call script, objection answers, one-pager.

• I read the rules.
• I sent my first personal message.

About money: your share is agreed in writing with FIRME AI CORPORATION before your first message (email vincent@firmeai.com). Nothing here promises income. Most messages get no reply; that is normal.